fragrouter6(8)

📦
version 3.8 · 7 versions
, in epel 9

💅 fragrouter6(8) — your girl's guide to NIDS/NIPS evasion (IPv6 edition)

okay so real talk bestie, this is fragrouter6, and it lives in section 8 of the manual (the system administration girlies 🎀), under the IPv6 umbrella. it's giving "chaos goblin but make it educational" and honestly? iconic.

✨ SYNOPSIS ✨

fragrouter6 [-dv -f len -e count -t count] INTERFACE EVASION-METHOD

you give it an INTERFACE, you give it an EVASION-METHOD, and off you go 💖 no cap.

🌸 OPTIONS 🌸

  • -f len — size of mini fragments — like, option 64, and default is 8. tiny pieces, big energy 🦋
  • -e count — hop count to the IDS for evading (option 256 & 512). yes, that kind of count 💅
  • -t count — hop count to the target that reaches it
  • -v — verbose mode, prints all packets processed for evasion. she's chatty and we love that for her 🫶

👑 Evasion Methods 👑

  • 0 — no manipulation. (the "i'm just here for the vibes" option 😭)
  • 1-31 — the number of atomic fragmentation headers to insert
  • 32 — use destination headers for 1-31 instead of fragmentation headers. plot twist bestie ✨
  • 64 — fragment each packet to 8 byte length pieces (or change with -f)
  • 128 — a large destination header that fragments the packet
  • 256 — insert fake TCP data with a hop count just for the IDS (-e)
  • 512 — insert TCP connection reset packet with a hop count just to the IDS (-e)
  • 1024 — insert fake fragmentation data with a hop count just for the IDS (-e)
  • 2048 — insert faked seq/ack data TCP packet

🔥 DESCRIPTION 🔥

kk so, fragrouter6 performs NIDS/NIPS evasion to all defined packets that originate from your system or pass through it. main character behavior 💀

all evasion methods can be combined — you literally just add them together — with the exception that only either one of 64 or 128 can be used at once. pick a lane, girl 🙈

option 1024 can be used with 1..31 and 64. yes, they can hold hands 🤝

the evasion methods are processed in the following order, and bestie this order is not up for debate:

  1. 256
  2. 512
  3. 2048
  4. 1..31/33..63
  5. then either 64 or 128
  6. then 1024
⭐ heads up: this requires you to set up ip6table rules that jump to NFQUEUE. use fragrouter6.sh, which is a wrapper for ip6tables and fragrouter6! don't skip this part, i'm begging 😭💖

🧚 AUTHOR 🧚

thc-ipv6 was written by van Hauser <vh@thc.org> / THC

the homepage for this toolkit is: https://github.com/vanhauser-thc/thc-ipv6

fragrouter6 3.8 (c) 2020 by van Hauser / THC <vh@thc.org> www.github.com/vanhauser-thc/thc-ipv6

alright that's the whole page, slay 💅 and just so we're keeping receipts: this little masterpiece is from THC, dated 2022-06-19, and it's fragrouter6(8) — mwah, go fragment something responsibly 🎀✨🦋

📦 where this page comes from